Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8de37567-0e23-48eb-bff0-d9f0edf74ab8.roa
File: 8de37567-0e23-48eb-bff0-d9f0edf74ab8.roa (raw, json)
Hash identifier: k2rLgPli7LgOl5p3MLgHpCDWd6RTZOKZF06p0Ei+fOE=
Subject key identifier: D4:25:D8:19:7D:E8:01:EC:4D:5C:8C:CE:E2:9A:7D:93:74:64:78:98
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 539137D1BA0C59BE57DBEE1CDEDCA40AF236C31A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8de37567-0e23-48eb-bff0-d9f0edf74ab8.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:91:37:d1:ba:0c:59:be:57:db:ee:1c:de:dc:a4:0a:f2:36:c3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: serialNumber=6c314aed6c0ff0f0157dab326c7b5098e72ebad31ded956873ff5b5ffd945292, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:0d:97:63:90:90:6f:2f:87:4b:0e:22:8e:
e9:71:0c:3f:0b:36:5d:ca:63:99:12:c4:6c:03:19:
cf:8d:66:d0:db:18:cb:47:ea:42:e1:be:aa:2f:cf:
13:3c:b5:c2:e9:ae:da:69:1a:c5:bb:31:9c:e4:58:
fa:d5:8c:e5:1f:5a:24:06:55:ec:b1:f2:3a:cd:d6:
a4:58:44:d6:2c:56:69:dc:0b:27:4f:7c:40:b6:b4:
ad:57:f2:60:ff:48:64:be:01:4a:2a:61:e3:3d:20:
4f:18:3b:f7:bf:16:47:7d:62:c6:21:24:e8:dd:9c:
fb:81:83:0c:a1:e7:49:5c:6b:08:cc:33:ec:73:d8:
83:62:fc:01:42:90:1f:2f:d0:16:dc:af:2b:5b:f6:
02:36:81:13:04:6b:c4:56:6e:62:3d:75:55:b4:06:
3b:06:9c:13:ac:6e:fa:31:cc:9a:8e:e3:f3:f4:db:
49:5e:fe:5f:db:d2:4f:35:08:15:2c:f9:ab:8e:7a:
52:b3:6e:0e:4d:68:07:0c:27:3e:37:22:fd:0a:b2:
f2:63:ef:9d:2c:65:7f:11:a8:f0:70:80:b6:6e:9e:
e8:a9:05:74:55:6d:28:28:0c:60:b5:bd:6d:eb:d1:
91:5f:96:21:35:11:c6:a6:6f:9b:d8:40:92:f9:99:
2f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:25:D8:19:7D:E8:01:EC:4D:5C:8C:CE:E2:9A:7D:93:74:64:78:98
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8de37567-0e23-48eb-bff0-d9f0edf74ab8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ab:14:a9:43:c9:28:a3:dc:29:e2:40:91:7a:e6:61:0d:f8:
e4:5f:69:4c:8d:db:5d:13:d0:6a:34:6f:3f:3e:63:f8:d5:81:
ce:b3:92:ef:20:fb:2d:7a:6d:31:37:db:f1:6a:ac:bb:fa:93:
f0:a3:88:5d:ba:fe:13:f2:cb:22:eb:7c:e0:d0:85:3a:2f:e6:
5c:b5:c7:f2:40:84:49:91:59:6d:85:0f:02:85:91:7d:31:03:
70:bb:df:f5:f0:46:f5:9f:18:95:e5:08:1d:60:bc:a4:85:4b:
a8:63:cc:a0:af:16:60:77:a7:79:bd:5f:fc:55:96:c6:76:b7:
bf:99:8b:f6:79:58:86:74:68:15:dd:e5:43:24:7d:48:16:67:
57:0a:a6:04:6d:4f:ef:9d:e7:23:ed:e9:0c:47:50:ab:1f:ec:
09:7d:6b:bd:d8:08:76:a7:7f:f0:5c:31:2d:81:78:09:da:60:
f8:96:92:8c:38:8d:5a:a0:4f:e6:65:3a:f4:ca:33:df:62:84:
7a:86:04:4a:dd:1d:18:ed:a2:55:81:85:dc:48:f1:51:b9:16:
b1:ed:34:b9:d1:c4:cb:ec:66:c3:e8:96:bb:3b:02:6f:55:5e:
2d:72:83:71:72:07:92:73:ae:22:34:41:68:3e:59:95:58:77:
ad:e6:c2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:42:27 2025 by rpki-client